Have found a security issue in Symfony? Send the details to
security [at] symfony.com and don't
disclose it publicly until we can provide a fix for it.
Manage your notification preferences to receive an email as soon as a Symfony security release is published.
CVE-2023-46734: Potential XSS vulnerabilities in CodeExtension filters
November 10, 2023
#Security Advisories
Security bug release for symfony/ux-autocomplete CVE-2023-41336
September 11, 2023
#Security Advisories
CVE-2022-24894: Prevent storing cookie headers in HttpCache.
February 1, 2023
#Security Advisories
CVE-2022-24895: CSRF token fixation.
February 1, 2023
#Security Advisories
CVE-2022-23601 fixes CSRF token missing in forms.
January 29, 2022
#Security Advisories
CVE-2021-41268: Remember me cookie persistance after password changes
November 24, 2021
#Security Advisories
CVE-2021-41267: Webcache Poisoning via X-Forwarded-Prefix and sub-request
November 24, 2021
#Security Advisories
CVE-2021-41270: Prevent CSV Injection via formulas
November 24, 2021
#Security Advisories
CVE-2021-32693: Authentication granted to all firewalls instead of just one
June 17, 2021
#Security Advisories
CVE-2021-21424 prevents user enumeration in authentication mechanisms
May 12, 2021
#Security Advisories